I’ve been a bit lazy and not posted a bug here for a couple of weeks. What I have been doing however is quite a bit with Xsan and finding a few bugs to go with it. Here’s one found a couple of days ago.<\/p>\n
AFP shares from Xsan volumes do not correctly honour directory permissions for a user’s secondary groups. Directories that the user should be able to list because one of their secondary groups allow them read\/execute permission to the directory can not be seen over AFP when shared from Xsan.<\/p>\n
Essentially what is happening here is that if I have a user with the following UID, GID and groups:
\nuid=501(admin) gid=20(staff) groups=20(staff), 80(admin)<\/tt>
\nThe user can not view the contents of a folder shared from an Xsan volume if they reason they should be able to see it, according to the POSIX permissions, is that one of their groups (but not their primary group) allows them to. So in this case, if a directory had the following permissions:
\ndrwxr-x--- 7 admin admin 238 Sep 17 10:00 test<\/tt>
\nthe user wouldn’t be able to list the directory over AFP if the directory is on an Xsan volume.<\/p>\n
This problem does not effect files: if the user has permission to read a file through their secondary groups they can do it without difficulty.<\/p>\n
This has been tested on Mac OS X 10.4.2 Server and Xsan 1.1 with a Mac OS X 10.4.2 client. I’ve filed a bug with detailed steps for reproduction as Radar ID 4259969.<\/p>\n","protected":false},"excerpt":{"rendered":"
I’ve been a bit lazy and not posted a bug here for a couple of weeks. What I have been doing however is quite a bit with Xsan and finding a few bugs to go with it. Here’s one found a couple of days ago. Summary AFP shares from Xsan volumes do not correctly honour […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/posts\/11"}],"collection":[{"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/comments?post=11"}],"version-history":[{"count":0,"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/posts\/11\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/media?parent=11"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/categories?post=11"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.allocinit.net\/blog\/wp-json\/wp\/v2\/tags?post=11"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}